Information Processing Apparatus, Server, Method for Controlling the Same and Storage Medium

1. An information processing apparatus that communicates with a server via a network, comprising: a hardware processor; and a first memory, which is not detachable from the information processing apparatus, that stores identification information of the information processing apparatus and a program that is executed by the hardware processor and causes the hardware processor to perform the functions of: a request unit that transmits an issuance request that requests a certificate necessary to connect to the server, including the identification information of the information processing apparatus stored in the first memory, to a certificate authority; a reception unit that receives the certificate, including the identification information of the information processing apparatus, issued by the certificate authority in accordance with the issuance request; a second memory that stores the certificate received by the reception unit, the second memory being detachable from the information processing apparatus; a determination unit that determines whether or not the identification information of the information processing apparatus stored in the first memory corresponds to the identification information included in the certificate stored in the second memory; and a connection control unit that controls the information processing apparatus to: (i) transmit a connection request to the server in accordance with the determination unit having determined that the identification information stored in the first memory corresponds to the identification information included in the certificate stored in the second memory, and (ii) restrict transmission of the connection request to the server in accordance with the determination unit having determined that the identification information stored in the first memory does not correspond to the identification information included in the certificate stored in the second memory.

2. The apparatus according to claim 1 , wherein the certificate is a client certificate.

3. The apparatus according to claim 1 , wherein the identification information includes at least one of a device serial number, a MAC address, and an IP address of the information processing apparatus.

4. The apparatus according to claim 1 , further comprising a third memory that stores a secret key and a public key corresponding to the secret key, the third memory being detachable from the information processing apparatus, wherein the transmission unit transmits the issuance request including the public key stored in the third memory to the certificate authority.

5. The apparatus according to claim 1 , further comprising an input unit that inputs a parameter necessary for the issuance request, wherein the transmission unit transmits the issuance request including the parameter input by the input unit to the certificate authority.

6. The apparatus according to claim 5 , wherein the input unit transmits screen information for displaying a screen for inputting the parameter to another information processing apparatus, and inputs the parameter by receiving parameter input through the screen in the other information processing apparatus.

7. A method of controlling an information processing apparatus that communicates with a server via a network, the method comprising: storing identification information of the information processing apparatus in a first memory that is not detachable from the information processing apparatus; transmitting an issuance request that requests a certificate necessary to connect to the server, including the identification information unique to the information processing apparatus stored in the first memory, to a certificate authority; receiving the certificate, including the identification information of the information processing apparatus, issued by the certificate authority in accordance with the issuance request; storing the certificate received in the receiving in a second memory that is detachable from the information processing apparatus; determining whether or not the identification information of the information processing apparatus stored in the first memory corresponds to the identification information included in the certificate stored in the second memory; and controlling the information processing apparatus to: (i) transmit a connection request to the server in accordance with a determination in the determining that the identification information stored in the first memory corresponds to the identification information included in the certificate stored in the second memory, and (ii) restrict transmission of the connection request to the server in accordance with a determination in the determining that the identification information stored in the first memory does not correspond to the identification information included in the certificate stored in the second memory.

8. A non-transitory computer-readable storage medium storing a program for causing a computer to execute a method comprising: storing identification information of an information processing apparatus in a first memory that is not detachable from the information processing apparatus; transmitting an issuance request that requests a certificate necessary to connect to a server, including the identification information of the information processing apparatus stored in the first memory, to a certificate authority; receiving the certificate, including the identification information of the information processing apparatus, issued by the certificate authority in accordance with the issuance request; storing the certificate received in the receiving in a second memory that is detachable from the information processing apparatus; determining whether or not the identification information of the information processing apparatus stored in the first memory corresponds to the identification information included in the certificate stored in the second memory; and controlling the information processing apparatus to: (i) transmit a connection request to the server in accordance with a determination in the determining that the identification information stored in the first memory corresponds to the identification information included in the certificate stored in the second memory, and (ii) restrict transmission of the connection request to the server in accordance with a determination in the determining that the identification information stored in the first memory does not correspond to the identification information included in the certificate stored in the second memory.

9. The apparatus according to claim 4 , wherein the hardware processor further performs the functions of: a first transmission unit that transmits the certificate stored in the second memory to the server in response to a transmission request for transmitting the certificate from the server, in a case that the connection control unit transmits the connection request to the server; and a second transmission unit that transmits a signature generated using the secret key stored in the third storage unit to the server.

10. The apparatus according to claim 1 , wherein the hardware processor further performs the function of a notification unit that notifies a user of a connection failure with the server in a case that the connection control unit restricts transmission of the connection request to the server.